Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
File: UqWb8EMIAwY1n1opSR9UWwcFHAU.mft (raw, json)
Hash identifier: ddxkvidQchjSQSEHKINfP5GpKCosayQIV1lqAhaEdAs=
Subject key identifier: A8:C8:2B:AD:24:DF:11:99:A1:BE:B3:42:10:81:D6:47:C9:B9:15:9C
Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
Certificate issuer: /CN=52a59bf043080306359f5a29491f545b07051c05
Certificate serial: 0196760C90ED16196BC1DD5948CFAC7E19B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 07:00:57 +0000
Manifest this update: Sun 27 Apr 2025 07:00:57 +0000
Manifest next update: Mon 28 Apr 2025 07:00:57 +0000
Files and hashes: 1: GvWU7eZamVvazZtWUoco1OLF2MQ.roa (hash: 9kEJ/d7rwclzCBcSORu1ByXHG+IDCNPxceZqglg+1Hw=)
2: UqWb8EMIAwY1n1opSR9UWwcFHAU.crl (hash: 87PF0BGPQy6BP8oG8bIQ7mZ9rpwZtRS+b/o9L/j2WxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:90:ed:16:19:6b:c1:dd:59:48:cf:ac:7e:19:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a59bf043080306359f5a29491f545b07051c05
Validity
Not Before: Apr 27 07:00:57 2025 GMT
Not After : Apr 28 07:00:57 2025 GMT
Subject: CN=a8c82bad24df1199a1beb3421081d647c9b9159c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:32:a1:9d:5c:23:2f:73:e7:25:9c:50:f7:
2a:ea:dc:c4:e3:0d:55:4f:d2:a9:28:c5:3a:16:bf:
07:db:5b:04:85:fe:8b:b8:37:5b:c6:4e:c9:1e:51:
8b:9f:ab:05:d3:bd:c2:53:8e:09:54:21:a2:40:b6:
7a:0c:cd:62:77:69:00:dd:56:07:5d:3e:e0:15:f0:
28:e8:1d:81:be:62:a0:a1:31:c8:54:18:93:cc:36:
02:30:f7:be:21:d7:df:42:56:d7:14:4c:03:be:86:
d8:fc:84:11:01:0e:33:31:44:be:4b:62:1a:8d:7d:
9b:48:08:4f:b3:1e:a1:ce:23:c8:8e:db:45:0d:8c:
54:06:6d:8a:d1:5b:d8:dc:35:ea:46:f6:73:a4:27:
6d:4c:d3:43:56:eb:5c:41:03:62:f1:02:a7:95:5d:
ce:c0:ac:89:e1:63:8b:42:e6:91:89:65:3f:b8:ed:
72:c6:8b:50:88:44:24:d9:fd:42:ea:8b:54:3d:0f:
97:0e:fe:69:f7:94:4f:88:69:95:6c:32:ab:f0:2c:
ea:38:d1:0b:56:a2:a9:4e:9b:6c:1b:79:8d:28:7e:
79:06:65:86:b9:cf:99:38:84:c5:12:4c:8a:66:1b:
5d:df:4f:17:b9:51:f5:dc:8e:9a:5f:6b:da:bc:6d:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C8:2B:AD:24:DF:11:99:A1:BE:B3:42:10:81:D6:47:C9:B9:15:9C
X509v3 Authority Key Identifier:
keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:43:1b:d6:17:ee:8a:4a:5e:e2:53:2e:1c:f3:18:4b:56:5c:
89:95:9f:9c:d5:c8:40:13:3e:28:85:76:bf:d2:ee:ed:bb:e9:
8b:e3:43:db:e2:ff:bc:69:db:7a:72:86:dd:51:5c:4d:30:b3:
29:c4:23:c8:a8:f3:88:41:0f:c8:7f:38:63:c1:2d:65:f3:3e:
4a:12:e3:7e:0e:8a:42:e0:27:68:1b:79:d7:49:93:c5:ad:65:
ef:09:f3:34:c7:1e:7f:ca:a8:83:fb:db:10:72:a7:16:03:99:
f6:85:72:d1:81:57:36:00:80:49:c7:a5:59:c4:80:eb:ee:85:
7c:d7:0c:98:69:3f:b5:79:c5:37:39:d1:c9:4d:85:fc:8a:72:
fa:13:4d:15:37:48:c7:8a:9e:8a:3c:2f:63:6b:c2:33:0f:d3:
86:42:3a:a0:c9:f1:ed:6b:0d:bb:0a:fc:b9:9f:74:df:58:55:
03:2d:8d:61:b8:1f:b9:f1:66:ba:db:41:0a:2f:e5:a0:62:fa:
18:31:14:59:3d:cc:71:46:74:bc:38:de:cc:b0:18:7d:d7:a0:
2b:88:f8:ab:4f:7e:63:cb:fe:5e:05:cd:92:e6:37:8d:2a:d3:
5e:ea:9c:e2:69:03:fd:10:53:d3:9a:2f:07:c5:9f:cc:01:72:
2e:14:98:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:35 2025 by rpki-client